Sarah assists clients in identifying, evaluating and managing global privacy and information security risks and compliance issues. Ranked by Chambers UK, she has experience advising clients on privacy and data protection compliance issues, including those associated with international data transfers, conducting privacy impact assessments, and risk management associated with the collection and use of data (particularly in the context of leading-edge technologies) and marketing-related issues. Sarah also advises clients on cybersecurity incident response and associated regulatory investigations and enforcement proceedings. Clients have said that “I love to work with her . . . She is business-driven and delivers everything efficiently.”

With a broad background in commercial contracts, Sarah routinely advises clients on the privacy and data security provisions of complex commercial and technology-related contracts, as well as those arising in the context of corporate transactions. While her primary focus is privacy and cybersecurity matters, Sarah also has experience working on technology transactions, including supply, distribution, licensing and outsourcing arrangements, consumer rights and e-commerce-related matters.

Sarah is a frequent author and speaker at international conferences on related privacy and cybersecurity issues.

Relevant Experience

• Advising multiple major technology companies on global privacy compliance and cybersecurity-related matters.
• Providing investment firms data privacy and IP advice, including assisting with product launches and preparation of related contractual documentation.
• Advising clients on global privacy compliance programs, including compliance with the EU and UK General Data Protection Regulations (GDPRs).
• Advising clients on their cross-border data transfer strategies, including Binding Corporate Rule (BCR) applications, Standard Contractual Clauses (SCCs).
• Advising on complex, cross-border cybersecurity incidents and data breaches and investigations with the UK Information Commissioner’s Office (ICO).
• Advising companies on compliance regarding the use of cookies and other tracking technologies.
• Providing data privacy advice in the context of COVID-19 and return to work issues.

Education
LLB, King’s College London, The Dickson Poon School of Law, 1998

• Understanding the Current AI Compliance Issues and Data Privacy Risks in the Metaverse, Law.com
• UK ICO Publishes Guidance on Workplace Monitoring, Compliance & Enforcement
• UK-U.S. data bridge: Important step towards free-flowing data, Thomson Reuters Regulatory Intelligence
• The risk of losing our EU data adequacy agreement is real, Computer Weekly
• UK Court Blocks UK ICO Fine and Enforcement Against Clearview, Compliance & Enforcement
• Regulating AI in the EU and the UK - a legal view, FST Blog
• UK/EU Privacy & Cybersecurity: Current Legislative Trends
• The UK Data Protection and Digital Information Bill, CPO Magazine
• A New Era: The EU-U.S. Data Privacy Framework, Thomson Reuters’ Regulatory Intelligence